Changelog
Product updates and improvements
v1.3.39
Minor1 feature, 16 bug fixes and 1 test.
- corea9ca1b8ignore the swagger default sentinel in JSON schema generation
- corec9a6028compile the secret-masking file appender and the cherry-picked tests (#19400)
- core7e9ff33mask secrets in log-to-file exception traces
- coree8cd43apost the silent token refresh under the context-path (#18991)
- cored965065private cache-control on tenant-scoped execution downloads
- executionsf3395dareject executing a soft-deleted flow
- executions99dbc65bound what the overview tab renders too
- executionsf50564bbound what the outputs screens render
- executions027d4c3scope the concurrency-limit read to the flow
- executionsdf4c096unify webhook 404 so flow existence isn't leaked
- executorc5dab4aprevent breakpoint from re-triggering on resume
- logsc7059c5bound dynamic taskrun task ids at their source (#19427)
- namespaces5b03b08gate namespace file actions in the editor on the NAMESPACE permission (#18990)
- ui71c4ba6make document title reactive to route changes (#19259)
- ui9f26b7dupdate .gitignore to include generated files and package distribution
- global3004bfeprevent NPE when Switch task has only defaults and no cases
- executions7803d7agive two tests their own inputs.yaml fixture
v2.0.1
Minor2 features, 43 bug fixes and 3 changes.
- ai249e0e5grow the copilot composer around a prompt that is already in it when it opens (#19389)
- core6d9d42cFlowServiceTest compilation
- coreff84cd1reject invalid BOOL input values
- cored953f86mask secrets in log-to-file exception traces
- cored02c78frenew a stale CSRF cookie token instead of failing the initial setup with 403 access denied (#18965)
- corec22fda1drop the definitions of input types excluded from a schema (#19142) (#19231)
- core91d7f71stop LoopUntil after maxIterations instead of maxIterations + 1 (#19209)
- coref6fcb48private cache-control on tenant-scoped execution downloads
- core9318eaeContent-Disposition filename injection on export endpoints
- cored51059ftranslate the remaining hardcoded strings (#19129)
- coreb5a85e9fix grammar issues in english UI text (#19127)
- core11642d6translate the hindi kill message instead of leaving it in english (#19126)
- corefcf92cfuse the global translator in the logs pager and plugin card templates (#19048)
- core283b86bthe browser back button no longer skips the page you came from (#19124)
- core74f5800stop the generator upper-casing state words and mangling casing in non-latin locales (#19036)
- core121f3e9translate sentence-initial nouns instead of keeping them in english (#19035)
- core21616ffmake the translation generator reroll and refuse english copies (#19032)
- core4d303ealet the english-copy rule accept kestra entity nouns and product names (2.0 backport) (#19118)
- core7561119inspect getDeadline() in DAILY_TIME_WINDOW branch of TimeWindowValidator
- core303c025reject restart of a PAUSED execution
- coree85c9f2match HTTP allow/deny lists on the URI authority and re-check redirects
- dashboards05d026edrill-down page filters, clicked time bucket, drawer reload (#18988) (#19205)
- design-system85d3369align the "last 30 days" filter value with the app's PT720H (#19141) (#19232)
- design-system3c837f8drop the trailing comma that makes the manifest unparseable (#19315)
- design-systemc484cbfapply-to option highlight in the interval filter (#19086)
- executionsbc3a6b3reject executing a soft-deleted flow by explicit revision
- executions76fe90aunify webhook 404 so flow existence isn't leaked
- executions9398b12api action downloads the execution json as a link (#18902)
- executionsbb7349eshow the task run state-change hints again (#19038)
- executor6008c2edo not resume a Pause twice when its pauseDuration expires after a manual resume (#18597)
- flowsa572fc1clear the draft flag when deleting a flow's draft head
- flowsfc2225fbreadcrumb navigation from execution to flow edit no longer blanks the page (#18997) (#19111)
- plugins1f04106pebble docs table renders its own text as HTML (#19323)
- schedulerd0476c1publish vNode assignments as immutable snapshots
- schedulerbb88cbfstop() lost on a scheduling loop still queued for start
- scheduler2f3200cspurious thread-starvation warning on fresh start
- scheduler744b28bcompile the unparseable-flow trigger test against the 2.0.x store API
- scheduler8a2162aan unparseable flow no longer stalls its scheduling loop or floods the logs (#19137)
- testsecfe04eDefaultSchedulerTest liveness-manager stalls and vacuous assertions
- triggers663d093timezone picker for the Schedule trigger in the no-code form (#18963)
- globalc1f4190prevent NPE when Switch task has only defaults and no cases
- global1f6d142use schedule timezone for cron validation
- global20fd0fereject unsatisfiable schedule cron expressions
- core586c613keep the release branches translated with the auto-translate bot (#19203)
- core94966a0generate the translations of a pull request from a fork on demand (#19192)
- core98cccf5tell the enterprise repository when a push changes the translation keys (#19191)
- core27d4d61declare the node version the translation scripts need (#19190)
- core5508835make translations:check run the PR gate before the comparer (#19136)
- corec571150run the translation gate on every push to develop and the release branches (#19135)
- core3f33e2dcheck the namespace of runtime-built translation keys in the gate (#19033)
- corec67de14fail the translation gate on stale fingerprints in the locale files (#19031)
- deps11dfc77translations check no longer downloads tsx (#19094)
- tests6887c66one script naming convention across the frontend packages (2.0 backport) (#19257)
- version137e9ecupdate to version '2.0.1'
v1.3.38
Minor5 bug fixes, 1 documentation update and 1 test.
- coree84f5d8reset pagination when returning to a list page (#18953)
- executionsb591177keep preview parameters when redirecting to the owning execution (#19068)
- iam11adee3unauthenticated RCE via encoded-separator filter evasion
- systemfce9005stop the version tooltip covering the theme toggle (#19099)
- webserver0c48f96gate open-urls prefix matching on the resolved route's identity
- version5f614e3update to version '1.3.38'
v2.0.0
Major2 breaking changes, 111 features and 4 merges.
- UI72818bbadd query filter options to IAM UI components (#14956)
- ai49922f1note when the AI model is switched mid-conversation (#18538)
- aia2f6c3dsupport custom HTTP headers on every copilot model provider (#17992)
- aiafd1eccexpand copilot page context and note context changes in the chat (#17728)
- ai4938d09animate the Kestra mark in the copilot working indicator (#17666)
- ai48e95e3revamp ai copilot style (#16545)
- ai3e89076add AI Copilot to No-Code editor (#15209)
- appsb933bfcgenerate the JS/TS SDK in-repo (OSS) (#17541)
- appscdbec44redesign Settings page and align design system with Figma 2.0 (#16310)
- assetsa895dc7add a layered DAG view and freshness to asset dependencies (#18567)
- assets1e2699easset editable type (#18352)
- async7a7ceaeblocking single-action + async batch for executions and triggers
- blueprintcabfff9migrate community blueprint API to QueryFilter format (#16117)
- buildf8a4875migrate Docker plugin install to kestractl CI download
- cases975ebb9QueryFilter/JDBC support + UI foundation for Cases (EE) (#17504)
- charts92b0d7fallow setting progressDeadlineSeconds on Deployments (#17782)
- ci55c10e1replace GH_PERSONAL_TOKEN with GitHub App installation tokens (#16012)
- clicf0816cprint UI URL as the last line once the server is fully ready
- cli68e52f4add configuration-schema command for JSON Schema generation (#15753)
- copilot2ed2f14add ownAndInheritedSecrets and use it in expression context
- copilot3227852add ExpressionContextService with typed context, RunVariables introspection, and test coverage
- core307ef7badd a @DurationMin constraint beside @DurationMax (#19001)
- core6ca00eereject an external log store outside Enterprise Edition (#18982)
- core6346960add url to the default SDK authentication (#18605)
- corebd9d3b0use 3D artwork on empty states (#18629)
- core65270d0add Flow/Custom tabs to the embedded blueprints panel (#18295)
- core6d3d920add ForbiddenException mapped to HTTP 403
- coreadd80eaintroduce no data page for custom blueprints (#18202)
- cored35b5ccparse kotlp OTLP telemetry in TaskLogLineMatcher (#17873)
- core31a9d7cimplement search filter in outputs tab (#17511)
- coreb341e66introduce `select all` option to the select component in design system (#17713)
- coreb859109add assetFailureBehavior property to AssetsDeclaration (#9467)
- core501f0b1add locked query filter field for assets (#9466)
- core78d4b6aadd ProtectedZipInputStream to guard against ZIP-bomb attacks
- core92bc9a3amend the format of the new flow IDs (#17626)
- corecd26c65normalize PostHog event names to surface.object.action (#17573)
- core87e9c81add onWebhookMatched hook after webhook key matching
- coreca6cd11OSS enablers for EE Policies
- core3b0d2dagenerate docs for charts, data filters, apps and app blocks (#17030)
- coreb259dc6census input types by name in the anonymous usage report (#17258)
- core8264ea0REUSABLE_INPUTS input type, validation, and editor seam (#17042)
- core5c5c4f4show an icon inside asset dependency nodes (#17207)
- corebbdc940disable blueprints that need plugins which are not installed (#17121)
- coreb8922d7add metric constants for maintenance enter/exit (#16597)
- cored0a7fe0attach logs to dynamically-generated taskruns and nest them in the UI
- corec0e0016let task runners emit detail on the failure path
- core050a539add full arg to the secret() pebble function
- core26fbee1add `CTRL` + `Shift` + `L` shortcut to cycle themes (#16940)
- coreeaf57eaautocomplete subflow() namespace and id arguments (#16882)
- core20fc773add config flag to disable the UI and run the webserver API-only (#16748)
- core4d6fedcadd subflow() Pebble function
- corec05e508make external tooltip follow the cursor and only over bars/slices (#16836)
- core2fc1229redesigned Gantt. (#16680)
- core7a9ed14fallback SDK auth to OSS basic auth
- core4a285a4redesign flow blueprints list (#16457)
- core248b30fmatch strategy on WorkerSelector + Disposition on WorkerQueueRouting
- coree0703eaadd maintenance status endpoint (#16181)
- coreb37908badd CSRF token protection for cookie-authenticated requests (#16317)
- corebbee04dshow version badge with commit info and refactor and unify admin section (#16285)
- core66f239bswitch ION serialization to binary format (#16144)
- cored8f2413add isLastWorkingDay() Pebble function
- coreb869c0fautomate all migration scripts (#15601)
- core27aff90monitor queue subscriber pause/resume and fix subscribers gauge (#15750)
- core6949451add translation keys related to enterprise copilot (#15707)
- core9f63dd4extract reusable copilot component for onboarding pages (#15533)
- cored289f9bregexp filter (#15351)
- core4bcacf5add kestra.ai.enabled property to disable AI copilot entirely (#15476)
- coreed9db4fopen no-code trigger creation form from flow triggers tab (#15463)
- corec231395make sidebar logo destination configurable via prop (#15462)
- core7bb7272respect timeWindow.default for filter time range (#15461)
- core8851014redirect logo click to welcome page (#15404)
- core5e781f7add secret property type to No-Code editor
- core97da227add @PluginProperty(secret = true) with validation for it
- coreab1125aadd PebbleUtil and replace hardcoded Pebble delimiters
- core55240ccAdd support for ServiceInstance (#15173)
- core8f4b28aintroduce new welcome page with revamped onboarding (#15046)
- corebc7d993introduce dependency view filtering (#14972)
- core57eea63add separate purge options for execution and trigger logs in PurgeLogs (#14922)
- core782a6d6implement SecurityIntegration ENABLED filter. (#14839)
- core53db598allow exporting dependency graphs as jpeg or png images (#14941)
- core325e186implement BINDING TYPE and NAMESPACE filters (#14829)
- cored594be3implement GROUP.NAME filter. (#14812)
- corede39702implement INVITATION: NAME, EXPIRED_AT, EMAIL filters. (#14810)
- coref0e1051implement Role.NAME filter. (#14808)
- coref2ed88dimplement User.group EQUALS and IN filter (#14782)
- corea208201Expose service instance metrics via API and add new pending worker messages metric. (#14495)
- coredfae1c8remove deprecated runner property in favor or taskRunner
- corecf1cfd6remove Property deprecated methdso and constructors
- dashboardcd56ec0open a preview drawer on chart drill-down instead of a full-page redirect (#17194)
- dashboards5512794recycle offscreen dashboard charts and cap their canvas pixel ratio (#18588)
- dashboardsa1f6a8eload charts as they scroll into view and limit concurrent chart requests (#18199)
- dashboardsb9d8932custom dashboard to enterprise only (#17942)
- dashboards04d0a6dbroaden chart export to all data charts, add CSV/ION format, default dashboard sentinel (#17260)
- dashboards22e2b24expandable Top-N + Others Executions per-namespace chart (#17009)
- dashboardsbd68963replace "Executions In Progress" with filterable "Executions" widget (#16616)
- dashboards27ec04ballow setting a default dashboard
- design-system1336b23let KsSegmented options carry an icon (#18587)
- design-system4874533consistent clickable namespace and flow references across tables (#17575)
- design-systemaaeac87add square prop to KsButton for icon-only square buttons (#17474)
- design-system659356cenforce font-size scale across the UI (#16993)
- design-system9a7963credesign login page [2.0] (#16605)
- design-systemd8e8921add sass as a dependency and update package-lock (#16229)
- design-systemd81f37bexport color palette CSS vars, add missing EP wrappers and fix build exports (#16145)
- docs528607ain app docs 2.0 revamp (#17127)
- ds1f21950introduce loader for select
- execution786d23aadapt webhook multipart for EE
- execution870a5a5update execution progress component and API for average duration
- executionf5eb458add support for allowed and denied list for HTTP tasks
- execution96f9166replace execution statistics from the Execution repository to the new ExecutionStatistics repository
- execution70d19d4possible NoSuchElementException on State.getEndDate
- executionfcd9cfdExecution stat ...
v1.3.37
Minor4 bug fixes, 1 build change and 1 subtask.
- core1e5d88ereplay from a task run that moved in the requested flow revision
- core9ad385cblank table when every column is hidden in kv store (#18873)
- namespaces19cde37parent folders not created when a folder name contains a slash (#18916)
- namespaces896be27offer download instead of loading large files in the editor (#18906)
- —8df29c9exit and dump heap on OOM in gradle jvmargs
- version035a5b3update to version '1.3.37'
v1.3.36
Minor14 bug fixes, 1 subtask and 1 change.
- core2321474apply plugin defaults to the task inside a TemplatedTask spec (#18609)
- core6443b7fsanitize rendered markdown against a tag and attribute whitelist
- cored913382reject unsafe URL schemes in rendered markdown links and images
- corea65bc78keep an all-hidden column selection across a refresh (1.3 backport) (#18721)
- coreab382dbapply the Timezone setting to revisions, dashboard dates and metric labels (1.3 backport) (#18720)
- core00ea68aredact encryptedOutputs markers from task runner logs
- core578610creject restart of a PAUSED execution
- corea88d2c2stale log level counters when the log search matches nothing (#18663)
- dashboardsb9e4812correct execution chart durations (1.3 backport) (#18345)
- executionsd5360berespect the Timezone setting in the Gantt scale and state-history timeline (1.3 backport) (#18719)
- namespaces11a7336require a dot boundary when skipping the KV allow-list (#18852)
- namespacesc7eff4descape file name in the delete confirmation dialog (#18787)
- pluginsf0b4c2dshow plugins hidden by their deprecated legacy subgroup (#18859)
- system47d7c6dreport plugin metrics hourly instead of daily (#18773)
- versionfb46b78update to version '1.3.36'
- coreFixed a reflected XSS that could lead to administrator account takeover via a crafted `sort` query parameter ([GHSA-j26h-55cv-c7pm](https://github.com/kestra-io/kestra/security/advisories/GHSA-j26h-55cv-c7pm)). Reported by Apostolos Sakellariou ([@Sakotass](https://github.com/Sakotass)).
v1.0.58
Minor5 bug fixes and 1 subtask.
- core0e70c42apply the Timezone setting to dashboard dates and metric labels (1.0 backport) (#18723)
- dashboards1d2a5fecorrect execution chart durations (1.0 backport) (#18346)
- executionsf5feb70respect the Timezone setting in the Gantt scale (1.0 backport) (#18724)
- namespacesba92ad4require a dot boundary when skipping the KV allow-list (#18853)
- system18d82a2report plugin metrics hourly instead of daily (#18773)
- versionf8d208cupdate to version '1.0.58'
v1.3.35
Minor6 bug fixes and 1 subtask.
- core161cdf6stop number formatting from crashing for the pt_BR and zh_CN languages (#18397)
- coref6b34c3per-request opt-out of 401 handling (#18266)
- dashboardsfd50156default the custom range end date time to now instead of midnight (#18306)
- dashboardsd7e250cseparate date and time with a space in time series chart labels (#18272)
- iamb66ab2calign frontend permission gates with backend enforcement (#18265)
- namespaces17b3addstop read-only users from editing and saving namespace files (#18291)
- versionc4e86acupdate to version '1.3.35'
v1.3.34
Minor1 feature, 11 bug fixes and 1 build change.
- apps206bb49lock app blueprints in the blueprints menu (1.3 backport) (#18168)
- chart3bfc40fset --group=1000 on dind insecure mode default args (#17813) (#18171)
- ci4b3d19fforward OTLP secrets to build-artifacts/e2e-tests/publish-maven
- ci5c11e33forward OTLP secrets to backend/frontend/design-system test jobs
- dashboard4c6fb58include child namespaces in parent namespace overview (#18201)
- dashboardsab23ac8apply the state filter on the executions list when clicking dashboard chart segments (#18205)
- flowsd923f10live validation for custom blueprint editor (1.3 backport) (#18197)
- flows4e08acestop yaml validation squiggles from reappearing in the templated blueprint editor (#18198)
- flows6b7d9efprevent editor freeze from backtracking in Pebble regex (#18153)
- uidc508abkeep disabled dropdown items readable in dark mode (#17985)
- ui496f0cfpoint welcome page blueprints links at the community tab (#18155)
v1.3.32
Minor4 bug fixes and 1 subtask.
- executiond3232famake State.getStartDate tolerant to no history
- namespacesd80120breject a file and a directory sharing the same path (#18034)
- scheduler8325da2anchor schedule next date on now when the trigger definition changes
- triggers39e8a48keep WorkerJobRunning entry alive for realtime per-emission results (backport) (#17779)
- version719c1b0update to version '1.3.32'
v1.3.31
Minor7 bug fixes and 3 subtasks.
- core2b7bb42null-safe labels in MetricRegistry.tags(AbstractTrigger)
- core7aac3fccompilation issue
- cored63a96dbucket metric aggrgatiion in UTC
- dashboardd196aa9render markdown properly
- executionec3eda5lock concurrrency by PK
- inputsc712aa6only show validation warnings after interaction or submit (#17780)
- system5f8acf7lookup for deadlock exception inside the suppressed exception and the next SQL exception
v1.3.30
Minor1 feature, 10 bug fixes and 1 test.
- assetsa9c480fallow colon in asset IDs to support CRN format
- core1a64397guard null input in startsWith/endsWith Pebble filters
- core31ee123count non-terminated task runs against Parallel/Dag concurrency limit (#17528)
- core5e4d881correct findLastNotTerminated predicate to skip terminated and paused runs
- docs760dce0load searched document in panel instead of opening new tab (#17644)
- inputs4a98bdfstrip null when optional input is cleared before execution (#17476)
- jdbc21047dedetect deadlocks nested deeper than one cause level
- plugins9549a46revalidate plugin schemas so newly added plugins autocomplete (#12102) (#17582) (#17608)
- system9959aafavoid week statistics crash on ISO week 53 and week 0
- tasks089aa5fskip Docker VOLUME output download when nothing is declared (#17311) (#17647)
- versiondb49f3bupdate to version '1.3.30'
- versiona486e97downgrade to version '1.3.29'
- versionf373392update to version '1.3.31'
- versiondc91bcbdowngrade to version '1.3.29'
- version7434814update to version '1.3.30'
- version77c9fbfbump to version '1.3.29'
- version3730398downgrade to version '1.3.28'
- globalcc7f3d8upgrade io.kestra.gradle.spotless-conventions to 1.2.6